open-agents-ai 0.187.528 → 0.187.530

package/dist/index.js

@@ -526701,6 +526701,123 @@ Pick the SMALLEST concrete deliverable from the spec — typically the project e
           timestamp: (/* @__PURE__ */ new Date()).toISOString()
         });
       }
+      /**
+       * DECOMP-2 PRE-dispatch enforcement check. Returns a synthetic block-message
+       * string when the gate should reject this dispatch; null to proceed normally.
+       *
+       * Caller logic differs between main-loop and brute-force dispatchers:
+       *   - Main loop returns the block as a synthetic { tc, output } result.
+       *   - Brute-force emits tool_result + pushes tool message + `continue`.
+       * Both invoke this method to compute the decision.
+       *
+       * Conditions for blocking:
+       *   - `_decomp2GateActive` is true (set by `_trackDecomp2` when threshold crossed)
+       *   - tool is one of the 4 creative-edit tools
+       *   - the path is NOT in `_decomp2MainContextFiles` (i.e. it's a NEW file)
+       *   - kill-switch `OA_DISABLE_DECOMP2` is not set
+       *
+       * Already-touched paths pass through (current-module finishing work allowed).
+       * sub_agent / web_search / task_complete pass through (not creative-edit tools).
+       */
+      _maybeDecomp2Block(tc, turn) {
+        if (!this._decomp2GateActive)
+          return null;
+        if (process.env["OA_DISABLE_DECOMP2"] === "1")
+          return null;
+        const _editTools = /* @__PURE__ */ new Set(["file_write", "file_edit", "batch_edit", "file_patch"]);
+        if (!_editTools.has(tc.name))
+          return null;
+        const _editPath = tc.arguments?.["path"] ?? "";
+        if (!_editPath || this._decomp2MainContextFiles.has(_editPath))
+          return null;
+        const _filesList = [...this._decomp2MainContextFiles].slice(0, 8).map((p2) => `  • ${p2}`).join("\n");
+        const _moreFiles = this._decomp2MainContextFiles.size > 8 ? `
+  ... +${this._decomp2MainContextFiles.size - 8} more` : "";
+        const decomp2Msg = [
+          `[BLOCKED — DECOMP-2 main-context exhaustion]`,
+          ``,
+          `You have already edited ${this._decomp2MainContextFiles.size} distinct files in main context without invoking sub_agent. Continuing to edit ANOTHER new file ('${_editPath}') will keep your context window saturated and trigger compaction thrashing.`,
+          ``,
+          `Files you've already edited (will accept further edits to these):`,
+          _filesList,
+          _moreFiles,
+          ``,
+          `For the next module, you MUST use sub_agent. Workflow:`,
+          `  1. Pick a pending todo (the orchestrator pre-populated module todos via DECOMP-1).`,
+          `  2. Call sub_agent({`,
+          `       subagent_type: "general",`,
+          `       prompt: "Implement <module-path> per spec",`,
+          `       relevantFiles: [{path: "<module-path>", content: "" /* or existing content */}],`,
+          `       constraints: ["Stay within <module-path>; integration verification happens later"],`,
+          `     })`,
+          `  3. After sub_agent returns, mark the todo completed.`,
+          ``,
+          `Why this matters: spreading edits across N files in main context burns ~N × file_size tokens. sub_agent gives the next module a focused context window.`,
+          ``,
+          `If you have ALREADY edited '${_editPath}' (this is a continuation), the orchestrator's set must have missed it — call file_read to verify, then re-edit. Otherwise, dispatch sub_agent now.`
+        ].join("\n");
+        this.emit({
+          type: "status",
+          content: `DECOMP-2 NEW-FILE BLOCK — rejected ${tc.name}('${_editPath}') at turn ${turn}; gate stays active until sub_agent is invoked`,
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        });
+        this._tagSyntheticFailure({
+          mode: "step_repetition",
+          rationale: `DECOMP-2 new-file block on '${tc.name}'(${_editPath}) — agent has spread edits across ${this._decomp2MainContextFiles.size} files without sub_agent`
+        });
+        return decomp2Msg;
+      }
+      /**
+       * DECOMP-2 post-dispatch tracking. Refactored from inline so both the
+       * main turn loop AND the brute-force re-engagement inner loop record
+       * edits / sub_agent calls and check the gate-activation threshold.
+       * Without this method on both paths, batch532 measured 14 distinct
+       * files edited but DECOMP-2 never activated — because the main loop
+       * exited via blocked task_complete and all subsequent edits flowed
+       * through the brute-force dispatch which had no tracking.
+       *
+       * Side effects when fired:
+       *   - On successful creative edit: adds path to `_decomp2MainContextFiles`,
+       *     possibly activates `_decomp2GateActive` (emits status).
+       *   - On sub_agent / priority_delegate / background_run: increments
+       *     counter, clears gate (emits status).
+       *
+       * Pure post-dispatch: caller invokes AFTER the tool result is in hand,
+       * regardless of which loop the dispatch happened in.
+       */
+      _trackDecomp2(tc, result, turn) {
+        if (process.env["OA_DISABLE_DECOMP2"] === "1")
+          return;
+        if (result && result.success !== false) {
+          const _editTools = /* @__PURE__ */ new Set(["file_write", "file_edit", "batch_edit", "file_patch"]);
+          if (_editTools.has(tc.name)) {
+            const _editPath = tc.arguments?.["path"] ?? "";
+            if (_editPath && typeof _editPath === "string") {
+              this._decomp2MainContextFiles.add(_editPath);
+              const DECOMP2_FILE_SPREAD_THRESHOLD = 5;
+              if (!this._decomp2GateActive && this._decomp2MainContextFiles.size >= DECOMP2_FILE_SPREAD_THRESHOLD && this._decomp2SubAgentCalls === 0) {
+                this._decomp2GateActive = true;
+                this.emit({
+                  type: "status",
+                  content: `DECOMP-2 NEW-FILE GATE ACTIVATED — ${this._decomp2MainContextFiles.size} distinct files edited in main context, 0 sub_agent calls; further edits to NEW files will be blocked until sub_agent is invoked`,
+                  timestamp: (/* @__PURE__ */ new Date()).toISOString()
+                });
+              }
+            }
+          }
+        }
+        if (tc.name === "sub_agent" || tc.name === "priority_delegate" || tc.name === "background_run") {
+          this._decomp2SubAgentCalls++;
+          if (this._decomp2GateActive) {
+            this._decomp2GateActive = false;
+            this.emit({
+              type: "status",
+              content: `DECOMP-2 GATE CLEARED — '${tc.name}' satisfied delegation directive at turn ${turn}`,
+              timestamp: (/* @__PURE__ */ new Date()).toISOString()
+            });
+          }
+        }
+      }
       readSessionTodos() {
         try {
           const sid = process.env["OA_SESSION_ID"] || this._sessionId || "default";
@@ -530669,69 +530786,19 @@ ${memoryLines.join("\n")}`
                 });
                 return { tc, output: reg61BlockMsg };
               }
-              if (this._decomp2GateActive && process.env["OA_DISABLE_DECOMP2"] !== "1") {
-                const DECOMP2_EDIT_TOOLS = /* @__PURE__ */ new Set([
-                  "file_write",
-                  "file_edit",
-                  "batch_edit",
-                  "file_patch"
-                ]);
-                if (DECOMP2_EDIT_TOOLS.has(tc.name)) {
-                  const _editPath = tc.arguments?.["path"] ?? "";
-                  const _isNewFile = _editPath && !this._decomp2MainContextFiles.has(_editPath);
-                  if (_isNewFile) {
-                    this.emit({
-                      type: "tool_call",
-                      toolName: tc.name,
-                      toolArgs: tc.arguments,
-                      turn,
-                      timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                    });
-                    const _filesList = [...this._decomp2MainContextFiles].slice(0, 8).map((p2) => `  • ${p2}`).join("\n");
-                    const _moreFiles = this._decomp2MainContextFiles.size > 8 ? `
-  ... +${this._decomp2MainContextFiles.size - 8} more` : "";
-                    const decomp2Msg = [
-                      `[BLOCKED — DECOMP-2 main-context exhaustion]`,
-                      ``,
-                      `You have already edited ${this._decomp2MainContextFiles.size} distinct files in main context without invoking sub_agent. Continuing to edit ANOTHER new file ('${_editPath}') will keep your context window saturated and trigger compaction thrashing.`,
-                      ``,
-                      `Files you've already edited (will accept further edits to these):`,
-                      _filesList,
-                      _moreFiles,
-                      ``,
-                      `For the next module, you MUST use sub_agent. Workflow:`,
-                      `  1. Pick a pending todo (the orchestrator pre-populated module todos via DECOMP-1).`,
-                      `  2. Call sub_agent({`,
-                      `       subagent_type: "general",`,
-                      `       prompt: "Implement <module-path> per spec",`,
-                      `       relevantFiles: [{path: "<module-path>", content: "" /* or existing content */}],`,
-                      `       constraints: ["Stay within <module-path>; integration verification happens later"],`,
-                      `     })`,
-                      `  3. After sub_agent returns, mark the todo completed.`,
-                      ``,
-                      `Why this matters: spreading edits across N files in main context burns ~N × file_size tokens. sub_agent gives the next module a focused context window.`,
-                      ``,
-                      `If you have ALREADY edited '${_editPath}' (this is a continuation), the orchestrator's set must have missed it — call file_read to verify, then re-edit. Otherwise, dispatch sub_agent now.`
-                    ].join("\n");
-                    this.emit({
-                      type: "tool_result",
-                      toolName: tc.name,
-                      success: false,
-                      content: decomp2Msg.slice(0, 120),
-                      turn,
-                      timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                    });
-                    this.emit({
-                      type: "status",
-                      content: `DECOMP-2 NEW-FILE BLOCK — rejected ${tc.name}('${_editPath}') at turn ${turn}; gate stays active until sub_agent is invoked`,
-                      timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                    });
-                    this._tagSyntheticFailure({
-                      mode: "step_repetition",
-                      rationale: `DECOMP-2 new-file block on '${tc.name}'(${_editPath}) — agent has spread edits across ${this._decomp2MainContextFiles.size} files without sub_agent`
-                    });
-                    return { tc, output: decomp2Msg };
-                  }
+              {
+                const _decomp2Block = this._maybeDecomp2Block(tc, turn);
+                if (_decomp2Block) {
+                  this.emit({ type: "tool_call", toolName: tc.name, toolArgs: tc.arguments, turn, timestamp: (/* @__PURE__ */ new Date()).toISOString() });
+                  this.emit({
+                    type: "tool_result",
+                    toolName: tc.name,
+                    success: false,
+                    content: _decomp2Block.slice(0, 120),
+                    turn,
+                    timestamp: (/* @__PURE__ */ new Date()).toISOString()
+                  });
+                  return { tc, output: _decomp2Block };
                 }
               }
               const PROGRESS_GATE_BYPASS_TOOLS = /* @__PURE__ */ new Set([
@@ -531841,32 +531908,9 @@ Respond with EXACTLY this structure before your next tool call:
                   if (this._fileWriteTimestamps.length > 200) {
                     this._fileWriteTimestamps.shift();
                   }
-                  const _editPath = tc.arguments?.["path"] ?? "";
-                  if (_editPath && typeof _editPath === "string") {
-                    this._decomp2MainContextFiles.add(_editPath);
-                    const DECOMP2_FILE_SPREAD_THRESHOLD = 5;
-                    if (!this._decomp2GateActive && this._decomp2MainContextFiles.size >= DECOMP2_FILE_SPREAD_THRESHOLD && this._decomp2SubAgentCalls === 0 && process.env["OA_DISABLE_DECOMP2"] !== "1") {
-                      this._decomp2GateActive = true;
-                      this.emit({
-                        type: "status",
-                        content: `DECOMP-2 NEW-FILE GATE ACTIVATED — ${this._decomp2MainContextFiles.size} distinct files edited in main context, 0 sub_agent calls; further edits to NEW files will be blocked until sub_agent is invoked`,
-                        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                      });
-                    }
-                  }
-                }
-              }
-              if (tc.name === "sub_agent" || tc.name === "priority_delegate" || tc.name === "background_run") {
-                this._decomp2SubAgentCalls++;
-                if (this._decomp2GateActive) {
-                  this._decomp2GateActive = false;
-                  this.emit({
-                    type: "status",
-                    content: `DECOMP-2 GATE CLEARED — '${tc.name}' satisfied delegation directive at turn ${turn}`,
-                    timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                  });
                 }
               }
+              this._trackDecomp2(tc, result, turn);
               if (result && result.success === false) {
                 this._runErrorCount++;
                 const errMsg = result.error || "";
@@ -532782,6 +532826,12 @@ Integrate this guidance into your current approach. Continue working on the task
                   }
                 }
                 this.emit({ type: "tool_call", toolName: tc.name, toolArgs: tc.arguments, turn, timestamp: (/* @__PURE__ */ new Date()).toISOString() });
+                const _decomp2BFBlock = this._maybeDecomp2Block(tc, turn);
+                if (_decomp2BFBlock) {
+                  this.emit({ type: "tool_result", toolName: tc.name, content: _decomp2BFBlock.slice(0, 200), success: false, turn, timestamp: (/* @__PURE__ */ new Date()).toISOString() });
+                  messages2.push(this.buildToolMessage(_decomp2BFBlock, tc.id));
+                  continue;
+                }
                 const tool = this.tools.get(tc.name);
                 let result;
                 if (!tool) {
@@ -532830,6 +532880,7 @@ Full content available via: repl_exec(code="data = retrieve('${handleId}')")  or
                   output = modelContent2;
                 }
                 this.emit({ type: "tool_result", toolName: tc.name, content: output.slice(0, 200), success: result.success, turn, timestamp: (/* @__PURE__ */ new Date()).toISOString() });
+                this._trackDecomp2(tc, result, turn);
                 const enoentTools2 = /* @__PURE__ */ new Set(["file_read", "list_directory", "find_files"]);
                 if (!result.success && enoentTools2.has(tc.name) && /ENOENT|no such file|does not exist|not found/i.test(result.error ?? result.output)) {
                   this._consecutiveEnoent++;
@@ -593871,44 +593922,156 @@ function openSettingsPane(name) {
   if (name === 'profiles')    { try { loadSettingsProfiles(); } catch {} }
 }
 
-// Connections — pulls /v1/config and renders an inline edit form.
+// ────────────────────────────────────────────────────────────────────
+// Connections settings — TUI /endpoint command parity.
+//
+// Reads /v1/config + /v1/config/endpoint. Renders an editor with:
+//   - Backend URL (editable)
+//   - Backend type (auto-detected, editable: ollama / vllm / openai / unknown)
+//   - Auth key (Bearer token, masked, editable)
+//   - Test connection button — fetches the URL's models endpoint
+//   - Save button — PUT /v1/config/endpoint with {url, backendType, auth}
+//   - Endpoint history (loaded from /v1/config — recently-used URLs)
+//
+// The previous implementation had two bugs that broke the entire feature:
+//   1. POST instead of PUT (server only accepts PUT on /v1/config/endpoint)
+//   2. Body field was {endpoint} not {url} (server validates field name)
+// Save button silently failed for every user. Fixed.
+// ────────────────────────────────────────────────────────────────────
 async function loadSettingsConnections() {
   const host = document.getElementById('settings-connections-host');
   if (!host) return;
   host.innerHTML = '<div style="color:var(--color-fg-muted);font-size:0.74rem">loading...</div>';
   try {
-    const r = await fetch('/v1/config', { headers: headers() });
-    if (r.status !== 200) {
-      host.innerHTML = '<div style="color:var(--color-error);font-size:0.74rem">/v1/config returned ' + r.status + '</div>';
-      return;
-    }
-    const cfg = await r.json();
-    const ep = (cfg && (cfg.endpoint || cfg.backend_url)) || '';
+    const [cfgR, epR] = await Promise.all([
+      fetch('/v1/config', { headers: headers() }).then(r => r.json()).catch(() => ({})),
+      fetch('/v1/config/endpoint', { headers: headers() }).then(r => r.json()).catch(() => ({})),
+    ]);
+    // /v1/config returns { config: {...}, settings: {...} } — prefer config (live runtime),
+    // fall back to settings (file-persisted), then top-level fields for older daemons.
+    const liveCfg = (cfgR && cfgR.config) || cfgR || {};
+    const persistedCfg = (cfgR && cfgR.settings) || {};
+    // /v1/config/endpoint returns { url, backendType, auth } directly.
+    const ep = (epR && epR.url) || liveCfg.backendUrl || persistedCfg.backendUrl || '';
+    const bt = (epR && epR.backendType) || liveCfg.backendType || persistedCfg.backendType || '';
+    const authSet = (epR && epR.auth === '[set]') || (liveCfg.apiKey && liveCfg.apiKey !== '[redacted]');
     const safeEp = String(ep).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
+    const safeBt = String(bt).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
     host.innerHTML =
-      '<label style="display:block;font-size:0.78rem;margin-bottom:6px">Backend endpoint</label>' +
-      '<input id="settings-conn-endpoint" type="text" value="' + safeEp + '" style="width:100%;background:var(--color-bg-input);border:1px solid var(--color-border);color:var(--color-fg);padding:6px 10px;border-radius:var(--radius-sm);font-size:0.78rem">' +
-      '<div style="margin-top:10px"><button class="oa-btn-secondary" onclick="saveSettingsConnections()">save</button></div>' +
-      '<div id="settings-conn-status" style="margin-top:8px;font-size:0.7rem;color:var(--color-fg-muted)"></div>';
+      '<div style="display:flex;flex-direction:column;gap:14px">' +
+        '<div>' +
+          '<label style="display:block;font-size:0.78rem;font-weight:500;margin-bottom:6px">Backend URL</label>' +
+          '<input id="settings-conn-endpoint" type="text" value="' + safeEp + '" placeholder="http://127.0.0.1:11434 or https://api.openai.com/v1" ' +
+            'style="width:100%;background:var(--color-bg-input);border:1px solid var(--color-border);color:var(--color-fg);padding:8px 12px;border-radius:var(--radius-sm);font-size:0.82rem;font-family:var(--font-mono)" ' +
+            'oninput="autoDetectBackendType(this.value)">' +
+          '<p style="font-size:0.7rem;color:var(--color-fg-muted);margin:4px 0 0">Examples: <code>http://127.0.0.1:11434</code> (Ollama) · <code>https://api.openai.com/v1</code> · <code>https://llm.chutes.ai/v1/chat/completions</code> (auto-strips path)</p>' +
+        '</div>' +
+        '<div>' +
+          '<label style="display:block;font-size:0.78rem;font-weight:500;margin-bottom:6px">Backend type</label>' +
+          '<select id="settings-conn-backend-type" style="width:200px;background:var(--color-bg-input);border:1px solid var(--color-border);color:var(--color-fg);padding:6px 10px;border-radius:var(--radius-sm);font-size:0.78rem">' +
+            ['ollama','vllm','openai','unknown'].map(t => '<option value="' + t + '"' + (t===safeBt?' selected':'') + '>' + t + '</option>').join('') +
+          '</select>' +
+          '<p style="font-size:0.7rem;color:var(--color-fg-muted);margin:4px 0 0">Auto-detected from URL on input. Override if needed.</p>' +
+        '</div>' +
+        '<div>' +
+          '<label style="display:block;font-size:0.78rem;font-weight:500;margin-bottom:6px">Auth key (Bearer)</label>' +
+          '<input id="settings-conn-auth" type="password" value="" placeholder="' + (authSet ? '••••••••• (set — leave blank to keep)' : 'leave blank for none') + '" ' +
+            'autocomplete="off" spellcheck="false" ' +
+            'style="width:100%;background:var(--color-bg-input);border:1px solid var(--color-border);color:var(--color-fg);padding:8px 12px;border-radius:var(--radius-sm);font-size:0.82rem;font-family:var(--font-mono)">' +
+          '<p style="font-size:0.7rem;color:var(--color-fg-muted);margin:4px 0 0">' + (authSet ? 'A key is currently set. Leave blank to preserve, or enter a new one to replace.' : 'Required for OpenAI / Chutes / Groq / etc. Leave blank for local Ollama.') + '</p>' +
+        '</div>' +
+        '<div style="display:flex;gap:8px;align-items:center;flex-wrap:wrap">' +
+          '<button class="oa-btn-secondary" onclick="testSettingsConnections()">test connection</button>' +
+          '<button class="oa-btn-secondary" onclick="saveSettingsConnections()" style="background:var(--color-accent);color:#fff;border-color:var(--color-accent)">save</button>' +
+          '<span id="settings-conn-status" style="font-size:0.74rem;color:var(--color-fg-muted)"></span>' +
+        '</div>' +
+      '</div>';
   } catch (e) {
     host.innerHTML = '<div style="color:var(--color-error);font-size:0.74rem">' + e.message + '</div>';
   }
 }
+
+// Heuristic: pick a backend type from the URL pattern. Mirrors detectProvider()
+// in packages/backend-vllm/src/normalizeUrl.ts so the browser feels coherent
+// with the TUI / CLI provider auto-detect.
+function autoDetectBackendType(url) {
+  const sel = document.getElementById('settings-conn-backend-type');
+  if (!sel) return;
+  const u = String(url || '').toLowerCase();
+  let detected = 'unknown';
+  if (u.includes('11434') || u.includes('ollama')) detected = 'ollama';
+  else if (u.includes('openai.com') || u.includes('api.anthropic.com')) detected = 'openai';
+  else if (u.includes('vllm') || u.includes('chutes') || u.includes('groq') || u.includes('deepinfra') || u.includes('/v1')) detected = 'vllm';
+  if (sel.value === '' || sel.value === 'unknown') sel.value = detected;
+}
+
+async function testSettingsConnections() {
+  const inp = document.getElementById('settings-conn-endpoint');
+  const auth = document.getElementById('settings-conn-auth');
+  const status = document.getElementById('settings-conn-status');
+  if (!inp || !status) return;
+  status.textContent = 'testing...';
+  status.style.color = 'var(--color-fg-muted)';
+  // Strip /v1/chat/completions or /v1/* path so we can hit /v1/models — same as normalizeBaseUrl.
+  let base = String(inp.value || '').trim().replace(//$/, '');
+  base = base.replace(//v1/chat/completions$/i, '').replace(//v1/models$/i, '');
+  const url = base.endsWith('/v1') ? base + '/models' : base + '/v1/models';
+  try {
+    const opts = { headers: { 'Accept': 'application/json' } };
+    const a = auth && auth.value ? auth.value : '';
+    if (a) opts.headers['Authorization'] = 'Bearer ' + a;
+    const r = await fetch(url, opts);
+    if (r.status === 200) {
+      const j = await r.json().catch(() => ({}));
+      const data = (j && j.data) || (j && j.models) || (Array.isArray(j) ? j : []);
+      const count = Array.isArray(data) ? data.length : 0;
+      status.textContent = '✓ ok — ' + count + ' model(s) reachable';
+      status.style.color = 'var(--color-success)';
+    } else if (r.status === 401 || r.status === 403) {
+      status.textContent = '✗ unauthorized (' + r.status + ') — auth key required or wrong';
+      status.style.color = 'var(--color-error)';
+    } else {
+      status.textContent = '✗ HTTP ' + r.status;
+      status.style.color = 'var(--color-error)';
+    }
+  } catch (e) {
+    status.textContent = '✗ ' + (e && e.message ? e.message : 'connection failed');
+    status.style.color = 'var(--color-error)';
+  }
+}
+
 async function saveSettingsConnections() {
   const inp = document.getElementById('settings-conn-endpoint');
+  const bt = document.getElementById('settings-conn-backend-type');
+  const auth = document.getElementById('settings-conn-auth');
   const status = document.getElementById('settings-conn-status');
   if (!inp || !status) return;
   status.textContent = 'saving...';
+  status.style.color = 'var(--color-fg-muted)';
   try {
+    // Server expects PUT /v1/config/endpoint with body {url, backendType?, auth?}.
+    // Previous code POSTed with {endpoint:...} and got silently 404'd.
+    const body = { url: String(inp.value || '').trim() };
+    if (bt && bt.value && bt.value !== 'unknown') body.backendType = bt.value;
+    if (auth && auth.value) body.auth = auth.value;
     const r = await fetch('/v1/config/endpoint', {
-      method: 'POST',
-      headers: headers(),
-      body: JSON.stringify({ endpoint: inp.value }),
+      method: 'PUT',
+      headers: { ...headers(), 'Content-Type': 'application/json' },
+      body: JSON.stringify(body),
     });
-    if (r.status === 200) status.textContent = 'saved';
-    else status.textContent = 'failed (' + r.status + ')';
+    if (r.status === 200) {
+      status.textContent = '✓ saved — refresh model list to pick up the change';
+      status.style.color = 'var(--color-success)';
+      // Clear the auth input so it doesn't visually persist after save.
+      if (auth) auth.value = '';
+    } else {
+      const errBody = await r.json().catch(() => ({}));
+      status.textContent = '✗ failed (' + r.status + ')' + (errBody.error ? ': ' + errBody.error : '');
+      status.style.color = 'var(--color-error)';
+    }
   } catch (e) {
-    status.textContent = 'error: ' + e.message;
+    status.textContent = '✗ ' + (e && e.message ? e.message : 'error');
+    status.style.color = 'var(--color-error)';
   }
 }
 

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "open-agents-ai",
-  "version": "0.187.528",
+  "version": "0.187.530",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "open-agents-ai",
-      "version": "0.187.528",
+      "version": "0.187.530",
       "hasInstallScript": true,
       "license": "CC-BY-NC-4.0",
       "dependencies": {
@@ -1138,9 +1138,9 @@
       }
     },
     "node_modules/@libp2p/webrtc": {
-      "version": "6.0.20",
-      "resolved": "https://registry.npmjs.org/@libp2p/webrtc/-/webrtc-6.0.20.tgz",
-      "integrity": "sha512-hdSgAgXaL0+dbOTNbf5+OQdZHGNQQGVHlursquM3HHsKtkIOVWEWre2Wo8UhAT/LcLtZDVkcx+xsBQmF6ASPyQ==",
+      "version": "6.0.21",
+      "resolved": "https://registry.npmjs.org/@libp2p/webrtc/-/webrtc-6.0.21.tgz",
+      "integrity": "sha512-q7Qiqs/vrdECNRmOfLuYvcH7gLOk94vO8tHpkaIDJv2OxRLDcwAGqQ51K0932shU4DozDJ6203HdWaRJs3MMzg==",
       "license": "Apache-2.0 OR MIT",
       "dependencies": {
         "@chainsafe/is-ip": "^2.1.0",
@@ -1163,7 +1163,7 @@
         "it-stream-types": "^2.0.2",
         "main-event": "^1.0.1",
         "multiformats": "^13.4.0",
-        "node-datachannel": "^0.29.0",
+        "node-datachannel": "^0.32.3",
         "p-defer": "^4.0.1",
         "p-event": "^7.0.0",
         "p-timeout": "^7.0.0",
@@ -3179,9 +3179,9 @@
       }
     },
     "node_modules/fast-uri": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.0.tgz",
-      "integrity": "sha512-iPeeDKJSWf4IEOasVVrknXpaBV0IApz/gp7S2bb7Z4Lljbl2MGJRqInZiUrQwV16cpzw/D3S5j5Julj/gT52AA==",
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.1.tgz",
+      "integrity": "sha512-h2r7rcm6Ee/J8o0LD5djLuFVcfbZxhvho4vvsbeV0aMvXjUgqv4YpxpkEx0d68l6+IleVfLAdVEfhR7QNMkGHQ==",
       "funding": [
         {
           "type": "github",
@@ -4558,9 +4558,9 @@
       }
     },
     "node_modules/lru-cache": {
-      "version": "11.3.5",
-      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.3.5.tgz",
-      "integrity": "sha512-NxVFwLAnrd9i7KUBxC4DrUhmgjzOs+1Qm50D3oF1/oL+r1NpZ4gA7xvG0/zJ8evR7zIKn4vLf7qTNduWFtCrRw==",
+      "version": "11.3.6",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.3.6.tgz",
+      "integrity": "sha512-Gf/KoL3C/MlI7Bt0PGI9I+TeTC/I6r/csU58N4BSNc4lppLBeKsOdFYkK+dX0ABDUMJNfCHTyPpzwwO21Awd3A==",
       "license": "BlueOak-1.0.0",
       "engines": {
         "node": "20 || >=22"
@@ -4949,9 +4949,9 @@
       "optional": true
     },
     "node_modules/node-datachannel": {
-      "version": "0.29.0",
-      "resolved": "https://registry.npmjs.org/node-datachannel/-/node-datachannel-0.29.0.tgz",
-      "integrity": "sha512-aCRJA5uZRqxMvQAl2QtOnCkodF1qJa1dCUVaXW9D7rku2p6F7PWe5OuRLcIgOYe+e2ZyJu0LefIQ95TtCn6xxA==",
+      "version": "0.32.3",
+      "resolved": "https://registry.npmjs.org/node-datachannel/-/node-datachannel-0.32.3.tgz",
+      "integrity": "sha512-Aok1ZhLsll472lRefgWYuWJ0070jh0ecHravTdRyZEmoESumebMEQV8Y+poBwSW2ZbEwAokAOGsK5Cu8pDDT2g==",
       "hasInstallScript": true,
       "license": "MPL 2.0",
       "dependencies": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "open-agents-ai",
-  "version": "0.187.528",
+  "version": "0.187.530",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",